Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: JOmtZrrtcat8i/iEFL77K39NgtK/h89RCsadX0lP4uY=
Subject key identifier: 77:C7:4E:7C:4C:48:03:A9:C0:C8:FA:AF:9C:8A:D0:1A:6F:F9:33:CE
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 01977CE7FE19362B39D1F546AD7E75D853A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 11A3
Signing time: Tue 17 Jun 2025 08:01:08 +0000
Manifest this update: Tue 17 Jun 2025 08:01:08 +0000
Manifest next update: Wed 18 Jun 2025 08:01:08 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: SXfK3CJ4LgIxznMqPr+7LeVY0rrO4Mu7bRwUhO44CWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:fe:19:36:2b:39:d1:f5:46:ad:7e:75:d8:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Jun 17 08:01:08 2025 GMT
Not After : Jun 18 08:01:08 2025 GMT
Subject: CN=77c74e7c4c4803a9c0c8faaf9c8ad01a6ff933ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:90:55:f0:df:f3:eb:9f:f7:c3:ba:c1:c3:
2c:80:9e:73:5a:8f:ee:fb:c3:83:43:d3:ae:37:29:
d2:7e:f5:bc:81:75:4e:5d:a7:fd:7e:ad:50:64:ab:
56:e7:e3:25:46:8d:1f:f7:e5:72:10:9b:e0:c7:cd:
d5:b2:36:47:08:56:3f:1d:02:40:ba:69:fb:5b:02:
cf:5a:3c:0a:7f:b4:a7:54:78:99:08:45:a7:12:eb:
0e:55:f6:82:f2:4d:39:a1:12:8a:55:97:75:6b:59:
00:9e:c1:f7:9f:47:04:8c:da:38:7c:91:5f:aa:c4:
ef:2a:19:4b:cd:64:c4:37:6c:57:9e:88:06:38:6c:
04:2f:5e:af:b6:b0:03:64:c4:3f:34:9c:4c:8e:82:
99:20:65:44:1a:81:62:7d:c5:53:38:d3:16:8f:19:
8d:b2:f1:a2:94:89:59:94:1d:70:f5:10:65:40:fc:
f0:34:8c:28:ae:23:e8:6b:25:27:a6:65:6b:4d:d2:
c3:2a:ea:c4:fa:31:77:1e:ef:07:10:56:69:fa:2a:
ed:8f:d8:05:2b:86:a0:8b:0d:dd:b7:b6:ff:52:5a:
4d:66:8f:a3:6b:2d:aa:37:15:01:bd:e5:41:79:ec:
d2:e2:67:7d:25:41:79:d1:dd:cf:6b:0b:97:3c:35:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:4E:7C:4C:48:03:A9:C0:C8:FA:AF:9C:8A:D0:1A:6F:F9:33:CE
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:07:a9:e0:c6:ca:36:bf:69:af:22:eb:c8:6e:28:03:11:
15:62:8b:5c:53:bd:e8:d3:6d:8f:e3:a6:5f:5e:47:75:ed:9b:
90:92:08:57:5e:84:cc:c0:a7:98:73:01:0c:2a:b0:8e:d6:49:
b2:c3:f5:90:01:ee:c5:69:90:bb:77:21:77:7b:54:5b:9b:e7:
79:9e:09:4c:78:ec:84:2d:6a:ae:f3:91:8b:53:5b:c2:82:d1:
79:e3:6d:a1:ec:97:36:8f:0f:bd:9b:02:99:7b:30:42:9c:4d:
d9:a3:5d:86:9a:a9:d4:a7:d7:84:36:08:f6:6e:f0:d3:29:b0:
b1:e3:5c:fe:7b:01:43:a2:ab:ad:9a:9f:20:80:3a:64:32:31:
e0:aa:01:2c:3d:10:c8:85:a0:6f:3a:95:44:bd:5b:b1:b1:a2:
45:d0:ae:90:32:4e:20:b3:29:5a:1e:dd:1f:3d:35:10:22:ed:
55:27:d7:14:93:11:40:95:6c:57:47:47:af:a1:a0:19:46:42:
3a:13:6c:bf:67:67:e5:90:c7:a7:56:43:bb:b6:db:21:05:22:
a1:b7:e8:80:0c:8b:14:b2:95:bf:e0:31:09:55:15:78:39:da:
64:44:61:27:ef:88:e5:d7:83:a6:f5:a1:df:09:73:58:ec:ca:
23:69:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:19:05 2025 by rpki-client